VULNERABILITY INTELLIGENCE

CVE-2020-0041

CVSS score7.8 HIGH

EPSS probability3.17%

CISA KEVKnown exploited vulnerability

Published2020-03-10

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Android Kernel Out-of-Bounds Write Vulnerability

Vendor / product: Android / Android Kernel

Description

In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145988638References: Upstream kernel

Weakness classification

nvd@nist.gov: CWE-20
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-20

Primary references

security@android.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory, US Government Resource